Terms of Service

1. Authorized security testing only

The Service is a toolkit for authorized security testing. You may use it only against assets you own, or for which you hold explicit, written and current authorization from the owner — for example a signed contract, signed Rules of Engagement (ROE), or the published scope and safe-harbor terms of a bug bounty program.

You must stay inside the authorized scope, time window and testing methods. Any activity outside the ROE or program scope is prohibited.

2. Your responsibility

If you test without authorization, or outside the agreed ROE or scope, you act entirely at your own risk and accept full legal responsibility — civil, administrative and criminal — for your actions.

The Service provides tooling only. It does not verify your authorization on your behalf (except where a verification feature is explicitly enabled), and we are not liable for how you use it. You are responsible for complying with the laws of the country where you are and of the countries where your targets are located.

3. Accounts

You must provide accurate information, keep your credentials secure and tell us promptly about any unauthorized use of your account. You are responsible for all activity under your account, including actions taken by members you invite to your workspace and by your API keys.

4. Records we keep

To protect the Service and investigate abuse, we keep audit records, including when and from which IP address you accepted these Terms, the authorization you declared for each target, and when scans were started. Details are in the Privacy Policy.

5. Suspension and termination

We may suspend or terminate accounts, block scans or targets, and remove content when we reasonably believe these Terms or the Acceptable Use Policy have been breached, or when required by law. We may cooperate with lawful requests from competent authorities and disclose relevant records to them.

6. Third-party services

Some features use third-party services you choose, such as sign-in with Google or GitHub, or an AI provider you connect with your own API key. Your use of those services is governed by their own terms.

7. Disclaimer and limitation of liability

The Service is provided "as is" and "as available", without warranties of any kind. Scan results can be incomplete or wrong and must be verified.

To the maximum extent permitted by law, we are not liable for indirect, incidental or consequential damages, loss of data, profits or business, or for damage caused by your use of the Service against any system. Our total liability for any claim is limited to the amount you paid us for the Service in the 12 months before the claim.

8. Indemnification

You agree to indemnify and hold harmless PentestHub AI and its operators from any claims, damages, fines and costs (including reasonable legal fees) arising from your use of the Service, your testing activity, or your breach of these Terms or the law.

9. Changes

We may update these Terms. When we make a material change, the version number changes and you will be asked to review and accept the new version before you can continue using the Service.

10. Governing law

These Terms are governed by the laws of the Republic of Uzbekistan, and disputes are subject to the competent courts of the Republic of Uzbekistan, unless mandatory law where you live provides otherwise.

11. Contact

Questions about these Terms: support@pentesthubai.com. Security vulnerabilities in the Service: security@pentesthubai.com.